Just an FYI. Anyone affected by this can create a ...
# suitescript
d
Just an FYI. Anyone affected by this can create a search with the following criteria:
Copy code
Upcoming HTML and JavaScript Restriction for Search Formulas

The upcoming restriction will remove this preference and will prevent all HTML and JavaScript output from being rendered.
Formula (Text)   contains href   {returnfield}
b
They appear to have learned that you can xss without script tags
I would have expected oracle to know that in the first place
d
Thank @dcrsmith I have not heard about this yet. Where did you get that information from? Does anyone have a workaround to create hyperlinks in Saved Searches? I've got too many searches that are going to break.😖 Is this just if you're using Javascript tags or all HTML? Would something like this break?
'<a href="<https://system.netsuite.com/app/accounting/transactions/itemship.nl?id=>' || {internalid} || '">' || {number} || '</a>'
d
Currently they are stripping all
<script>
tags but this will be all HTML, including the
<a />
This was sent to me in an email, probably because I'm involved in SDN and apps.
d
ooof. That's no fun. I know they killed <br/> a release or two ago. Not sure how I'll handle hyperlinks moving forward.
s
Glad I saw this, it will definitely screw a few things up for us. I have reached out to our NS support to get something official on this
@dansteg @dcrsmith I got the following from support: At this time, there is no official documentation as of yet for the total restriction. We can assure you that this restriction should not affect existing accounts and may only affect newly provisioned accounts after a certain date. There is no tentative/target date as of yet for this restriction. A new email campaign will be sent notifying the target date when finalized. There is also no workaround planned at the moment, rest assured our product teams will keep track of the most requested (safe) customizations that are a must-have for companies who require this feature. As of today, HTML output/rendering will still be supported as per our following help topics: • 8450 Using a Formula in Search Results • 95253 Restricting HTML for Search Formulas • 40574 Using a Custom Formula
d
@Sam L Thanks for the info. Hopefully they realize the impact that this will have on customers and figure out a workaround. It's a it concerning that there is "no workaround planned".
s
Well, reading the response it sounds like it will only impact newly provisioned accounts, not existing. I followed up to them and they confirmed this, so I dont think it will actually be implemented. Not sure why they would want to do this to new accounts though
d
I'm hoping they may at least allow for hyperlinks.
s
I need full html, our users love pretty colours
💯 1